Vulnerability · Published Apr 1, 2026 · Assigned by VulDB

CVE-2026-5310Enter Software Iperius Backup IperiusAccounts.ini hard-coded key

Low 2.5

In plain English

A low-severity security flaw in Iperius Backup from Enter Software. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities).

Severity (CVSS 3.1)2.5Low

Exploit odds (30 days)0.1%top 99.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was identified in Enter Software Iperius Backup up to 8.7.2. This impacts an unknown function of the file IperiusAccounts.ini. Such manipulation leads to use of hard-coded cryptographic key . The attack must be carried out locally. This attack is characterized by high complexity. The exploitability is said to be difficult. The exploit is publicly available and might be used. Upgrading to version 8.7.4 will fix this issue. It is suggested to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Affected products (as reported)

Vendor	Product	Versions
Enter Software	Iperius Backup	8.7.08.7.18.7.2

Weakness: CWE-321, CWE-320 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C

References

VDB-354639 | Enter Software Iperius Backup IperiusAccounts.ini hard-coded key vdb-entry
VDB-354639 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
Submit #778602 | Iperius Iperius Backup <= 8.7.2 Use of Hard-coded Cryptographic Key third-party-advisory
https://github.com/VulnaraByte/iperius-backup-security-advisories related
https://github.com/VulnaraByte/iperius-backup-security-advisories/blob/main/poc/decrypt_iperius.py exploit
https://www.iperiusbackup.com/download-software-backup.aspx patch